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REMARKS 



The foregoing Amendment amends the specification and adds Figure 2A. The 
amendment to the specification adds a brief description of new Figure 2A to the Brief 
Description of the Drawings section and clarifies the discussion of the single memory 
described in the paragraph beginning on page 1 1 , line 17. Support for the amendment to 
the specification and drawings is found on page 1 1, lines 17-25 of the specification; in 
original Claim 5; and through out the remainder of the specification. Now in the 
application are Claims 1-22, of which Claims 1, 6, 10, and 18 are independent. The 
following comments address all stated grounds for rejection and place the presently 
pending claims, as identified above, in condition for allowance. 

Rejections under 35 U.S.C. §103 

For purposes of clarity in the discussion below, the respective related claim sets 
will be discussed separately. 

A. Rejection of Claim 1 under 35 U.S.C. §103: 

The Office Action rejects Claim 1 as being unpatentable over U.S. Patent No. 
5,787,367 of Berra (hereinafter "Berra") in view of U.S. Patent No. 6,401,207 of 
Funakoshi et al (hereinafter "Funakoshi") and in further view of U.S. Patent No. 
5,945,906 of Onuma (hereinafter "Onuma"). Applicants respectfully traverse this 
rejection on the basis of the following arguments that Berra in view of Funakoshi and in 
further view of Onuma fails to teach or suggest all elements of Claim 1 , as described 
below, and hence does not obviate the claimed invention. 

Claim 1 is directed to a vehicle controller that includes a rewritable memory. In 
response the rewritable memory stores first security data that is used to determine 
whether rewriting to the rewritable memory is permitted. The vehicle controller is 
configured, in response to receipt of new security data from an external rewriting device, 
to delete the first security data, and, in turn, to write the new security data into the , 
rewritable memory. The rewritable memory is implementable in a non- volatile memory 
such as, a flash memory, an EPROM, or an EEPROM. Consequently, the invention 
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recited in Claim 1 beneficially allows recovery of a security feature by rewriting security 
data stored in a rewritable memory and thus preventing an illegal rewriting even if the 
security data has been divulged to a third party. 

The Berra reference is directed to a system and method for providing secured 
programming for reprogramming on-board vehicle computer systems. The on-board 
vehicle computer system of Berra includes an EEPROM to store a serial identification 
code, a first password A and a second password B. The serial identification code is used 
to gain access to a portion of an authorized database, the first password A is a unique 
numeric code identifying that particular engine control unit and the second password B 
contains a series of variables that define values used in connection with an encryption 
function. 

To reprogram the Berra on-board vehicle computer system, the disclosed system 
and method uses an interface tool in communication with the vehicle computer and the 
authorized database. The interface tool requests the serial identification code from the 
on-board computer, and in response, the computer transmits the serial identification code 
to the interface tool, which, in turn, forwards the serial identification code to the 
authorized database. The authorized database uses the serial identification code to look 
up and transmit the database copy of the first password A to the vehicle computer via the 
interface tool. 

The password lookup in the authorized database provides the designated first 
password A, which contains a unique message that is compared with the first password A 
stored in the vehicle computer. If the first password A from the authorized database 
matches the first password A stored in the vehicle computer, the database formulates an 
encryption function as a function of the second password B and a series of data values to 
produce a series of output values. These output values are transmitted to the vehicle 
controller via the interface tool where they are deciphered based on the encryption 
function and second password B to provide a series of deciphered data values. The 
deciphered data values are compared to the data values stored in the vehicle computer. If 
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the deciphered data values match the stored data values, authorized reprogramming of 
control software in the engine control unit is allowed. 

The Berra reference teaches or suggests an encryption technique to prevent 
unauthorized rewriting of an on-board computer. The Berra reference does not t each or 
suggest the rewriting of the serial identification code, first password A or second 
password B. That is, the Berra reference does not teach or suggest a vehicle controller 
configured so that in response to receipt of new security data from an external rewriting 
device the controller deletes the first security data stored in memory and writes the new 
security data into memory. Moreover, the Examiner admits that the Berra reference does 
not teach or suggest a vehicle controller configured to write new security data into 
rewritable memory. 



The Funakoshi reference is directed to a vehicle anti-theft system. The anti-theft 
system of the Funakoshi reference includes a key unit, such as an ignition key and an 
ECU mounted to the vehicle. The ECU includes a first data generation unit to produce a 
first data unit. The first data unit is copied by the ECU and provided to the key unit. 
Both the key unit and the ECU include a key generating unit for generating a key or 
password needed to decipher encoded data. Accordingly, the key unit (i.e. the ignition 
key) generates a password from the data unit provided by the ECU and stores the 
password in memory until needed. In similar fashion, the ECU generates the password 
from the data unit and stores the password in memory until needed. Accordingly, when 
the ignition key is inserted into the ignition or at some time shortly thereafter, the ignition 
key forwards the password to the ECU and in turn the ECU compares the received 
password to the password stored in the ECU to authenticate the ignition key to allow 
operation of the vehicle. 

The Funakoshi reference teaches or suggests an encryption technique for use in 
authenticating an ignition key. The Funakoshi reference fails to teach or suggest a 
vehicle controller having a rewritable memory for storing first security data used to 
determine whether rewriting to the rewritable memory is permitted. 



Serial No. 09/800,814 



7 



Group Art Unit 2635 



The Onuma reference is directed to a vehicle anti-theft system. The vehicle anti- 
theft system of Onuma includes a key unit (i.e. ignition key) and an ECU mounted to the 
vehicle. The key unit includes a memory for storing a transponder LD. unique to the key 
unit. The transponder LD. is used by an immobilizer unit in communication with the 
ECU to authenticate the transponder LD. provided by the key unit and take an appropriate 
( security measure should authentication fail. The Onuma reference does not teach or 
\ suggest a vehicle controller that includes a rewritable memory for storing first security 
data used to determine whether rewriting to the rewritable memory is permitted. 

In contrast, Claim 1 recites a vehicle controller for writing new security data into 
rewritable memory if first security data stored in the rewritable memory permits. That is, 
the vehicle controller of Claim 1 performs a memory rewrite if first security data held by 
the rewritable memory permits and in response to a permissible write receives new 
security data from an external rewriting device, deletes the first security data, and writes 
the new security data into the rewritable memory. The Berra reference does not teach or 
suggest a vehicle controller configured to in response to receipt of new security data from 
an external rewriting device, delete the first security data, and write the new security data 
into rewritable memory. The Examiner recognizes this deficiency in Berra and cites the 
Funakoshi reference to bridge the factual deficiencies of Berra. However, the Funakoshi 
reference teaches that the described vehicle controller does not receive new security data 
from an external rewriting device. The ECU of Funakoshi receives a password from a 
key unit, to authenticate the key unit, however, the received password is not new. The 
password provided by the key unit to the ECU should be a matching password to 
/ authenticate the key unit, and, hence, is not new security data. Moreover, the Funakoshi 
] reference is not concerned with rewriting to a rewritable memory, but rather, is concerned 
] with enabling or disabling a security function for the vehicle to prevent or allow vehicle 
( operation. 

The Examiner further cites a rolling code function of the Onuma reference as 
teaching or suggesting the deletion of first security data in response to receipt of new 
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security data from an external rewriting device and writing the new security data into the 
rewritable memory. However, the rolling code feature taught by Onuma takes place 
completely within the confines of the vehicle and is not transmitted to an external 
rewriting device or received from an external rewriting device. 

Neither the Berra reference, nor the Funakoshi et al reference, nor the Onuma 
reference, alone or in any combination, teach, suggest or disclose all the features recited 
in Claim 1. Only the Berra reference is concerned with rewriting to memory of a vehicle 
controller. Nevertheless, the Berra reference does not teach or suggest the rewriting of 
new security data the rewritable memory. The Berra reference further fails to teach or 
suggest the deletion of the first security data in response to the receipt of new security 
data from an external rewriting device. Both the Funakoshi reference and the Onuma 
reference fail to bridge the factual deficiencies of the Berra reference because they fail to 
teach or suggest the deletion of first security data and writing new security data into 
rewritable memory in response to receipt of the new security data from an external 
rewriting device. 

Accordingly, neither the Berra reference, nor the Funakoshi reference nor the 
Onuma reference, alone or in any combination, teach or suggest each and every element 
of Claim 1 . Hence, Applicants respectfully request the Examiner to reconsider and 
withdraw the rejection of Claim 1 under 35 U.S.C. §103. 

B. Rejection of Claims 6 and 7 under 35 U.S.C. § 103(a): 

The Office Action rejects Claims 6 and 7 as being unpatentable over Berra in 
view of Funakoshi and in further view of Onuma. Applicants' respectfully traverse this 
rejection on the basis of the following arguments that Berra in view of Funakoshi and in 
further view of Onuma fails to teach or suggest all elements of Claims 6 and 7 as 
described below, and hence, does not obviate the claimed invention. 

Claim 7 depends from Claim 6 and thereby incorporates the novel features of 
Claim 6. 
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Claim 6 is directed to a rewriting device for rewriting a rewritable memory 
included in a vehicle controller. The rewriting device includes a memory for storing new 
security data and a communication means for transferring the new security data. The 
transferred new security data is written into the rewritable memory and is used to 
determine whether rewriting to the rewritable memory is permitted. 

The Berra reference does not teach or suggest a rewriting device for rewriting a 
rewritable memory included in a vehicle controller that includes a memory for stirring 
new security data. Neither the Funakoshi reference nor the Onuma reference, alone or in 
combination, cure the factual deficiencies of the Berra reference. Both the Funakoshi 
reference and the Onuma reference are not concerned with a rewriting device, rather, 
each reference is concerned with an ignition key, which is clearly not a rewriting device. 

The Berra reference in view of the Funakoshi reference, and in further view of the 
Onuma reference, fail to teach or suggest each and every element of Claims 6 and 7, and 
therefore, fail to establish a prima facie case of obviousness. Accordingly, Applicants' 
respectfully request the Examiner to reconsider and withdraw the rejection of Claims 6 
and 7 under 35 U.S.C. § 103(a). 

C. Rejection of Claim 10 under 35 U.S.C. $103: 

The Office Action rejects Claim 10 as being unpatentable over Berra in view of 
Funakoshi and in further view of Onuma. Applicants' respectfully traverse this rejection 
on the basis of the following arguments that Berra in view of Funakoshi and in further 
view of Onuma fails to teach or suggest all elements of Claim 10, as described below, 
and hence, does not obviate the claimed invention. 

Claim 10 is directed to a memory rewriting system for a vehicle controller. The 
memory system includes a rewritable memory mounted on the vehicle controller, a 
rewriting device for transferring new security data to the vehicle controller. The 
rewritable memory stores first security data which is used to determine whether rewriting 
to the rewritable memory is permitted. The vehicle controller is configured to delete the 
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first security data and to write the new security data into the rewritable memory. The 
memory rewriting system of Claim 1 0 enables, even after shipment of a vehicle from the 
manufacturer, changing of a key for releasing a security feature that prevents a program 
or data stored in memory of the vehicle controller from being tampered. Even if the 
security feature has been divulged to an unauthorized third party, the vehicle 
manufacturer can use a rewriting device to change this security feature, thus enabling 
recovery of the security feature. 

The Berra reference teaches or suggests an encryption technique to prevent 
unauthorized rewriting of an on-board computer. The Berra reference does not teach or 
suggest a memory rewriting system for a vehicle controller that includes a rewritable 
memory mounted on the vehicle controller configured to delete first security data and to 
write new security data into the rewritable memory. Moreover, the Examiner admits that 
the Berra reference does not teach or suggest a memory rewriting system for a vehicle 
controller configured to write new security data into rewritable memory. 

The Funakoshi reference teaches or suggests an encryption technique for use in 
authenticating an ignition key. The Funakoshi reference fails to teach or suggest a 
memory rewriting system for a vehicle controller having a rewritable memory for storing, 
first security data used to determine whether rewriting to the rewritable memory is 
permitted. 

The Onuma reference is directed to a vehicle anti-theft system. The vehicle anti- 
theft system of Onuma includes a key unit (i.e. ignition key) and an ECU mounted to the 
vehicle. The key unit includes a memory for storing a transponder I.D. unique to the key 
unit. The transponder I.D. is used by an immobilizer unit in communication with the 
ECU to authenticate the transponder I.D. provided by the key unit and take an appropriate 
security measure should authentication fail. The Onuma reference does not teach or 
suggest a memory rewriting system for a vehicle controller having a rewritable memory 
for storing first security data used to determine whether rewriting to the rewritable 
memory is permitted. 
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In contrast, Claims 10 recites a memory rewriting system for a vehicle controller 
having a rewritable memory for storing first security data. The first security being used 
to determine whether rewriting to the rewritable memory is permitted. That is, the 
memory rewriting system of Claim 10 performs a memory rewrite if first security data 
held by the rewritable memory permits and in response to a permissible write receives 
new security data from an external rewriting device. The Berra reference does not teach 
or suggest a memory rewriting system for a vehicle controller having a rewritable 
memory that writes new security data into rewritable memory. The Examiner recognizes 
this deficiency in Berra and cites the Funakoshi reference to bridge the factual 
deficiencies of Berra. However, the Funakoshi reference teaches that the described 
vehicle controller does not receive new security data from an external rewriting device. 
The ECU of Funakoshi receives a password from a key unit, to authenticate the key unit, 
however, the received password is not new. The password provided by the key unit to 
the ECU should be a matching password to authenticate the key unit, and, hence, is not 
new security data. Moreover, the Funakoshi reference is not concerned with rewriting to 
a rewritable memory, but rather, is concerned with enabling or disabling a security 
function for the vehicle to prevent or allow vehicle operation. 

The Examiner further cites a rolling code function of the Onuma reference as t 
teaching or suggesting the deletion of first security data in response to receipt of new 
security data from an external rewriting device and writing the new security data into the 
rewritable memory. However, the rolling code feature taught by Onuma takes place 
completely within the confines of the vehicle and is not transmitted to an external 
rewriting device or received from an external rewriting device. 

Neither the Berra reference, nor the Funakoshi et al reference, nor the Onuma 
reference, alone or in any combination, teach, suggest or disclose all the features recited 
in Claim 10. Only the Berra reference is concerned with rewriting to memory of a 
vehicle controller. Nevertheless, the Berra reference does not teach or suggest the 
rewriting of new security data the rewritable memory of a vehicle controller. The Berra 
reference further fails to teach or suggest the deletion of the first security data in response 
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to the receipt of new security data from an external rewriting device. Both the Funakoshi 
reference and the Onuma reference fail to bridge the factual deficiencies of the Berra 
reference because they fail to teach or suggest the deletion of first security data and 
writing new security data into rewritable memory in response to receipt of the new 
security data from an external rewriting device. 

Accordingly, neither the Berra reference, nor the Funakoshi reference nor the 
Onuma reference, alone or in any combination, teach or suggest each and every element 
of Claim 10. Hence, Applicants respectfully request the Examiner to reconsider and 
withdraw the rejection of Claim 1 under 35 U.S.C. §103. 

D. Rejection of Claims 2-5 under 35 U.S.C. $ 103(a): 

Claims 2-6 are patentable for at least the same reasons set forth above with 
respect to Claim 1, from which these claims depend. The further recitation of the subject 
matter in Claims 2-5, provides a separate further bases for patentability. Neither the 
Berra reference, nor the Funakoshi reference, nor the Onuma reference, alone or in any 
combination teach or suggest the vehicle controller recited in Claim 1 . Accordingly, 
Applicants' respectfully request the Examiner to reconsider and withdraw the rejection of 
Claims 2-5 under 35 U.S.C. § 103. 

E. Rejection of Claims 7-9 under 35 U.S.C. $ 103: 

Claims 7-9 are patentable for the same reasons set forth above in connection with 
Claim 6, from which these claims depend. Claims 7-9 recite further patentable subject 
matter and each claim provides a separate further basis for patentability. Neither the 
Berra reference, nor the Funakoshi reference, nor the Onuma reference, alone or in any 
combination, teach or suggest a rewriting device for rewriting a rewritable memory 
included in a vehicle controller as recited in Claim 6. Accordingly, Applicants' 
respectfully request the Examiner to reconsider and withdraw the rejection of Claim 7-9 
under 35 U.S.C. § 103. 



Serial No. 09/800,814 



13 



Group Art Unit 2635 



F. Rejection of Claims 1 1-17 under 35 U.S.C. $ 103: 

Claims 1 1-17 are patentable for at least the same reasons set forth above with 
respect to Claim 10, from which these claims depend. The further recitation of patentable 
subject matter in Claims 11-17, provides separate further bases for patentability. Neither 
the Berra reference, nor the Funakoshi reference, nor the Onuma reference, alone or in 
any combination, teach or suggest a memory rewriting system for a vehicle controller as 
recited in Claim 10. Accordingly, Applicants' respectfully request the Examiner to 
reconsider and withdraw the rejection of Claims 1 1-17 under 35 U.S.C. § 103. 

G. Rejection of Claims 18-22 under 35 U.S.C. § 103: 

The Office Action rejects Claims 18-22 as being unpatentable over Berra in view 
of Funakoshi and in further view of Onuma. Applicants' respectfully traverse this 
rejection of the basis of the following arguments that Berra in view of Funakoshi and in 
further view of Onuma fails to teach or suggest all elements of Claim 18, as described 
below, and hence does not obviate the claimed invention. 

Claim 18 is directed to a method for rewriting data stored in a rewritable memory 
in a vehicle controller. The claimed method includes a step of receiving new security 
data transferred from an external rewriting device to the vehicle controller and deleting 
first security data stored in the rewritable memory. The first security data is used to 
determine whether rewriting to the rewritable memory is permitted. The method writes 
the new security data into the rewritable memory if permitted. 

Claims 19-22 depend directly or indirectly, from Claim 18 and thereby 
incorporate the patentable features of Claim 18. 

The Berra reference teaches or suggests an encryption technique to prevent 
unauthorized rewriting of an on-board computer. The Berra reference does not teach or 
suggest a memory rewriting system for a vehicle controller that includes a rewritable 
memory mounted on the vehicle controller configured to delete first security data and to 
write new security data into the rewritable memory. Moreover, the Examiner admits that 
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the Berra reference does not teach or suggest a memory rewriting system for a vehicle 
controller configured to write new security data into rewritable memory. 

The Funakoshi reference teaches or suggests an encryption technique for use in 
authenticating an ignition key. The Funakoshi reference fails to teach or suggest a 
memory rewriting system for a vehicle controller having a rewritable memory for storing 
first security data used to determine whether rewriting to the rewritable memory is 
permitted. 

The Onuma reference is directed to a vehicle anti-theft system. The vehicle anti- 
theft system of Onuma includes a key unit (i.e. ignition key) and an ECU mounted to the 
vehicle. The key unit includes a memory for storing a transponder I.D. unique to the key 
unit. The transponder I.D. is used by an immobilizer unit in communication with the 
ECU to authenticate the transponder I.D. provided by the key unit and take an appropriate 
security measure should authentication fail. The Onuma reference does not teach or 
suggest a memory rewriting system for a vehicle controller having a rewritable memory 
for storing first security data used to determine whether rewriting to the rewritable 
memory is permitted. 

In contrast, Claims 1 0 recites a memory rewriting system for a vehicle controller 
having a rewritable memory for storing first security data. The first security being used 
to determine whether rewriting to the rewritable memory is permitted. That is, the 
memory rewriting system of Claim 10 performs a memory rewrite if first security data 
held by the rewritable memory permits and in response to a permissible write receives 
new security data from an external rewriting device. The Berra reference does not teach 
or suggest a memory rewriting system for a vehicle controller having a rewritable 
memory that writes new security data into rewritable memory. The Examiner recognizes 
this deficiency in Berra and cites the Funakoshi reference to bridge the factual 
deficiencies of Berra. However, the Funakoshi reference teaches that the described 
vehicle controller does not receive new security data from an external rewriting device. 
The ECU of Funakoshi receives a password from a key unit, to authenticate the key unit, 
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however, the received password is not new. The password provided by the key unit to 
the ECU should be a matching password to authenticate the key unit, and, hence, is not 
new security data. Moreover, the Funakoshi reference is not concerned with rewriting to 
a rewritable memory, but rather, is concerned with enabling or disabling a security 
function for the vehicle to prevent or allow vehicle operation. 

The Examiner further cites a rolling code function of the Onuma reference as 
teaching or suggesting the deletion of first security data in response to receipt of new 
security data from an external rewriting device and writing the new security data into the 
rewritable memory. However, the rolling code feature taught by Onuma takes place 
completely within the confines of the vehicle and is not transmitted to an external 
rewriting device or received from an external rewriting device. 

Neither the Berra reference, nor the Funakoshi et ah reference, nor the Onuma 
reference, alone or in any combination, teach, suggest or disclose all the features recited 
in Claim 10. Only the Berra reference is concerned with rewriting to memory of a 
vehicle controller. Nevertheless, the Berra reference does not teach or suggest the 
rewriting of new security data the rewritable memory of a vehicle controller. The Berra 
reference further fails to teach or suggest the deletion of the first security data in response 
to the receipt of new security data from an external rewriting device. Both the Funakoshi 
reference and the Onuma reference fail to bridge the factual deficiencies of the Berra 
reference because they fail to teach or suggest the deletion of first security data and 
writing new security data into rewritable memory in response to receipt of the new 
security data from an external rewriting device. 

Accordingly, neither the Berra reference, nor the Funakoshi reference nor the 
Onuma reference, alone or in any combination, teach or suggest each and every element 
of Claim 10. Hence, Applicants respectfully request the Examiner to reconsider and 
withdraw the rejection of Claim 1 under 35 U.S.C. §103. 
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CONCLUSION 

For the foregoing reasons, Applicants contend that Claims 1-22 define over the 
cited art. If there are any remaining issues, an opportunity for an interview is requested 
prior to the issuance of another Office Action. If the above amendments are not deemed 
to place this case in condition for allowance, the Examiner is urged to call Applicants' 
representative at the telephone number listed below. 

Respectfully submitted, 
LAHIVE & COCKFIELD, LLP 

David R. Burns 
Reg. No. 46,590 
Attorney for Applicants 



28 State Street 
Boston, MA 02109 
(617) 227-7400 
(617) 742-4214 
Date: February 6, 2004 



